Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
File: BJ5OW_-brMwUl8sgid2GYbzRPvM.mft (raw, json)
Hash identifier: iWvOU3ODo/b4fS6vIvqR6wTbiGlJgYk3Duqj5ZlHljM=
Subject key identifier: 67:8A:36:44:2B:BC:6F:61:E4:0D:B2:7C:84:E8:14:E5:F0:C8:9C:9D
Authority key identifier: 04:9E:4E:5B:FF:9B:AC:CC:14:97:CB:20:89:DD:86:61:BC:D1:3E:F3
Certificate issuer: /CN=049e4e5bff9baccc1497cb2089dd8661bcd13ef3
Certificate serial: 01A0E8F69581F1EB2DEBBCBAABAE31EB6205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ5OW_-brMwUl8sgid2GYbzRPvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
Manifest number: FE
Signing time: Mon 28 Sep 2026 17:01:09 +0000
Manifest this update: Mon 28 Sep 2026 17:01:09 +0000
Manifest next update: Tue 29 Sep 2026 17:01:09 +0000
Files and hashes: 1: 1evrKFhO7_Y0fEoCaCBlAe11Mq0.asa (hash: BUcK0Ghpp1YkOCKLxdjr7iZfGC9WXW9IwF5EdrSTPXQ=)
2: BJ5OW_-brMwUl8sgid2GYbzRPvM.crl (hash: cr3fqejSeiq6ZRO8YxFcwtlpVtwtGAH7BiEAAm4wx3g=)
3: xS6vxP921IVWaCyGTtAEbNaX5bQ.roa (hash: IXNgSsDBlcEeLICLKjhHZidP1Oorwbq5IO+mS83mDWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ5OW_-brMwUl8sgid2GYbzRPvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:95:81:f1:eb:2d:eb:bc:ba:ab:ae:31:eb:62:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049e4e5bff9baccc1497cb2089dd8661bcd13ef3
Validity
Not Before: Sep 28 17:01:09 2026 GMT
Not After : Sep 29 17:01:09 2026 GMT
Subject: CN=678a36442bbc6f61e40db27c84e814e5f0c89c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3c:43:f2:01:dc:74:b9:5b:58:95:d2:b5:65:
72:29:94:4d:cd:73:63:94:10:47:84:92:4f:81:dc:
48:96:89:93:f2:bc:cb:61:c6:6d:e9:09:2e:a7:af:
32:f8:93:22:08:14:dd:23:5f:66:6c:84:5d:ec:7e:
a9:c7:9a:ae:78:a6:7b:05:a2:2b:83:ce:83:dd:b1:
e7:97:0d:ff:c3:4a:7e:69:8c:ad:23:9a:1f:7f:9a:
0c:01:8e:8f:1a:25:06:a1:81:15:d4:2f:9c:72:8c:
97:16:c7:41:d8:0b:64:51:73:85:11:81:33:73:04:
07:cc:3f:85:25:1f:82:8c:09:bf:77:6d:1a:77:6c:
b5:f8:de:06:69:21:58:b8:75:a6:63:de:c1:10:e3:
09:00:b6:bb:e5:1d:87:4d:f0:1c:85:1b:36:fb:40:
83:01:dc:dd:84:07:3f:b5:bf:f0:f1:6b:2a:09:0a:
1b:da:2f:ad:56:24:f0:79:ba:43:64:2d:66:9f:b6:
51:dc:8f:db:e4:df:13:68:98:44:55:bf:e7:31:70:
00:51:87:8c:17:eb:4f:a6:b9:71:b5:46:da:14:18:
1b:29:7f:04:9d:ed:d7:1f:71:d5:fc:2b:b1:ac:51:
1b:2b:33:5e:12:ac:98:6e:35:92:f6:4a:6d:95:9f:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8A:36:44:2B:BC:6F:61:E4:0D:B2:7C:84:E8:14:E5:F0:C8:9C:9D
X509v3 Authority Key Identifier:
keyid:04:9E:4E:5B:FF:9B:AC:CC:14:97:CB:20:89:DD:86:61:BC:D1:3E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ5OW_-brMwUl8sgid2GYbzRPvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a6f2f-6cac-4c16-8454-83e7db3b0037/1/BJ5OW_-brMwUl8sgid2GYbzRPvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:dd:b0:b1:14:84:a5:04:c5:9e:0a:9b:12:cf:f2:bb:45:b4:
75:33:cb:82:55:63:c5:2c:7b:68:36:19:e2:f3:65:8d:5a:6d:
a2:96:6f:6d:68:02:1d:c4:57:5d:24:33:e0:fe:6b:de:a4:2c:
5a:79:36:fc:73:5c:4d:46:1d:d2:6c:5b:8e:59:e6:8f:7a:3e:
31:66:fa:46:3d:a5:d9:ed:3b:c9:36:31:35:f9:88:1e:ee:b1:
e9:bc:6e:05:09:0b:d2:f7:ce:99:65:87:86:94:5d:ae:af:a9:
75:6f:e2:10:0a:16:6f:e0:4d:82:98:8c:93:46:56:34:86:91:
f0:6a:17:8c:f3:30:1e:10:17:fc:3a:44:73:7e:70:4a:5d:88:
59:b6:a9:56:52:0d:da:9f:bb:fe:e7:b9:1a:d4:03:ed:91:85:
3d:ff:0d:0f:07:37:99:3f:aa:08:3e:90:4a:c9:4c:a4:41:3d:
6e:b1:e0:46:78:6f:09:d5:ba:34:fd:94:14:67:4b:6e:30:20:
20:61:70:6d:65:08:da:1e:24:aa:85:0f:17:fb:17:57:75:b7:
82:8e:4f:81:45:74:98:4e:0a:71:10:43:35:e7:0b:b2:0f:56:
e8:dc:42:9d:79:0f:ec:9f:e6:d9:ad:7b:13:ab:ec:8f:cd:21:
10:12:40:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:29:26 2026 by rpki-client